$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf04ba15-6abe-49f7-9467-04a0524ec50c.roa File: cf04ba15-6abe-49f7-9467-04a0524ec50c.roa (raw, json) Hash identifier: AAy2KDxcDUVQwPIFkk1ioleHq6M2AXcVHoEr5OqREkw= Subject key identifier: D1:DC:F1:20:92:A4:23:2C:EA:DA:A3:E9:D9:03:F2:75:70:99:66:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 140222E8CFF83F106EA79C7B9406B171B8C48AC6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf04ba15-6abe-49f7-9467-04a0524ec50c.roa Signing time: Sat 18 Oct 2025 19:42:38 +0000 ROA not before: Sat 18 Oct 2025 19:42:38 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:02:22:e8:cf:f8:3f:10:6e:a7:9c:7b:94:06:b1:71:b8:c4:8a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:42:38 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=22105c4a468a8d82255879159149510193e2fdca5737913b67cb4062c5f98e94, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:98:35:a0:a8:e6:32:71:2d:a3:69:69:07: ed:87:fa:c9:8a:f6:26:d1:98:a9:12:ff:32:25:13: db:b0:b4:30:18:fd:e5:3e:48:3a:56:9c:18:bd:f9: a2:37:88:87:8e:36:78:26:10:97:54:c7:7e:af:00: d8:65:e4:11:dd:0f:ac:f5:71:d4:f9:e0:03:66:c2: 09:6b:fa:9d:95:6c:bb:a8:a9:ba:a6:de:74:64:5f: 0f:3e:a1:c0:b6:da:ee:3a:e2:b6:c2:1a:44:dd:55: a4:36:3b:60:aa:bf:3b:b4:04:15:9f:b7:5d:fb:5e: 91:56:4b:6c:86:ab:d9:7c:f4:0a:e4:8c:7d:71:a8: 8f:0f:28:aa:1b:f7:76:15:2b:c6:e4:00:50:54:d1: e2:30:4e:a3:3b:96:3e:e3:b8:b2:c1:ea:73:84:3e: 94:4c:53:3f:90:9b:f9:d4:e1:bf:d1:53:57:f6:23: e2:ef:4e:be:b6:66:18:e5:c9:17:99:a0:a4:9e:f8: 6d:49:5c:eb:f5:2c:1b:30:97:95:8f:e0:ff:e5:55: 07:f3:b6:3a:a1:47:85:33:7d:8b:38:89:a0:9a:a3: e6:79:64:85:03:f4:c2:1e:dd:d3:98:d7:05:0c:f7: 16:46:ce:6a:25:79:36:9b:a3:b5:b3:c7:ae:5f:d2: 7f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DC:F1:20:92:A4:23:2C:EA:DA:A3:E9:D9:03:F2:75:70:99:66:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf04ba15-6abe-49f7-9467-04a0524ec50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.104.0/24 Signature Algorithm: sha256WithRSAEncryption 98:d7:76:ec:d4:2c:d5:6d:8e:7e:a5:b8:68:9d:82:e6:4d:c3: b9:d9:a3:7a:46:e5:db:2b:d5:2b:58:6f:88:53:89:56:e2:36: 29:99:9b:e9:e2:91:3d:8d:9c:b9:16:3d:d1:52:61:99:76:c5: b3:e7:fd:3e:25:fd:1c:ae:bf:f7:f2:cb:73:00:6f:e7:49:ac: c4:42:70:51:4d:92:a4:9a:33:2d:f5:69:5b:c0:ad:15:52:9f: bf:5b:25:86:06:b3:c3:ab:93:22:74:55:20:05:f7:4b:de:f3: 43:a3:d9:5e:ca:5a:8d:0e:d6:0e:56:60:dd:99:fd:42:5f:44: cf:e4:f2:2e:3c:32:c1:1d:0c:90:a8:b2:89:2a:e7:eb:25:c6: db:7c:34:7d:08:6c:c3:e5:ea:43:7b:ef:f6:52:be:be:b9:6a: a6:9a:40:cd:53:25:28:fa:9a:63:46:1a:8d:b7:90:95:a0:b2: 0e:b9:d2:5b:59:9d:8c:df:19:1f:88:f1:1b:b0:8a:5f:8e:52: bc:a9:6a:96:21:04:6f:4f:2b:6c:00:06:63:45:44:fc:35:b6: 72:67:ef:aa:38:ad:fc:2d:c2:b2:ae:e2:7e:07:b6:62:17:83: cd:dd:ee:83:a0:84:72:f3:75:eb:3f:1f:d7:8f:53:00:65:77: 74:56:8b:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFAIi6M/4PxBup5x7lAaxcbjEisYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTk0MjM4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjEwNWM0YTQ2OGE4ZDgyMjU1ODc5MTU5MTQ5NTEwMTkz ZTJmZGNhNTczNzkxM2I2N2NiNDA2MmM1Zjk4ZTk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkOZg1oKjmMnEto2lpB+2H+smK9ibRmKkS/zIlE9uwtDAY /eU+SDpWnBi9+aI3iIeONngmEJdUx36vANhl5BHdD6z1cdT54ANmwglr+p2VbLuo qbqm3nRkXw8+ocC22u464rbCGkTdVaQ2O2Cqvzu0BBWft137XpFWS2yGq9l89Ark jH1xqI8PKKob93YVK8bkAFBU0eIwTqM7lj7juLLB6nOEPpRMUz+Qm/nU4b/RU1f2 I+LvTr62ZhjlyReZoKSe+G1JXOv1LBswl5WP4P/lVQfztjqhR4UzfYs4iaCao+Z5 ZIUD9MIe3dOY1wUM9xZGzmoleTabo7Wzx65f0n+TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0dzxIJKkIyzq2qPp2QPydXCZZrowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmMDRiYTE1LTZhYmUtNDlmNy05NDY3LTA0YTA1MjRlYzUwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7mgwDQYJKoZIhvcNAQELBQADggEBAJjXduzULNVtjn6luGidguZNw7nZ o3pG5dsr1StYb4hTiVbiNimZm+nikT2NnLkWPdFSYZl2xbPn/T4l/Ryuv/fyy3MA b+dJrMRCcFFNkqSaMy31aVvArRVSn79bJYYGs8OrkyJ0VSAF90ve80Oj2V7KWo0O 1g5WYN2Z/UJfRM/k8i48MsEdDJCosokq5+slxtt8NH0IbMPl6kN77/ZSvr65aqaa QM1TJSj6mmNGGo23kJWgsg650ltZnYzfGR+I8Ruwil+OUrypapYhBG9PK2wABmNF RPw1tnJn76o4rfwtwrKu4n4HtmIXg83d7oOghHLzdes/H9ePUwBld3RWi6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:08 2025 by rpki-client